Loading...
HomeMy WebLinkAboutSENSEMAKERS, LLC (3)A-2020-238-05A INSURANCE NOT ON FILE WORK MAY NOT PROCEED Contractor: SenseMakers LLC CITY CLERK DATE: 0 Pau, CAGREEMENT TO PROVIDE TRAINIG COURSES AND EXERCISES FOR THE / O�.Mor�nol�i ANA HEIM / SANTA ANA URBAN AREA ON AN AS=NEEDED BASIS Change Order 2020-238-05-1 o On this date, October 10, 2023, SenseMakers LLC and the City of Santa Ana wish to modify the services provided in Agreement A-2020-238-05. In accordance with the terms and conditions of said r-a © Agreement, the Parties wish to expand the scope of services to include 1) Cybersecurity training and exercise services ($169,891.80) and 2) All Hazard Incident Management Team (AHIMT) training CIO and exercise course ($156,295.00). Pursuant to the Change Order clause 2(a), to maintain flexibility that allows first responders to address emerging and unforeseeable threats, the City can modify the existing scope of work for specialty and other ad -hoc training and exercises an as needed basis. This modification does not change the overall not to exceed contract amount of $3,147,600 and terms outlined in Agreement A-2020-238-05. The parties mutually agree to update the agreement to including the following: 1. Section 1, SCOPE OF SERVICES, shall be modified as described and set forth in Exhibit B- 1, Costs, Training Classes and Exercises, attached hereto, and incorporated by reference to this Change Order. IN WITNESS WHEREOF, the parties hereto have executed this Change Order the date and year first above written. JENNIFE erk APPROVED AS TO FORM: SONIA R. CARVALHO City Attor ney By. TAMARA BOGOSIAN Senior Assistant City Attorney SENSEMAKERS LLC JIM BAILEY President CITY OF SANTA ANA %�A - STEVEN A. MENDOZA Acting City Manager FOR APPROVAL: f wee �i VALENTIN Chief of Police EXI IIBIT B-1 COSTS —'TRAINING CLASSES AND EXERCISES I'RAININ() Cuut,e Title Description Total Course Cost (rs li nugtnp This course addresses all roles and L•,'L 950 Incident Si3,79; Commander responsibilities appropriate to it All -Hazards Incident Commander operating in a local or slaw -Level AHIMT. 'These rosponsibilitics fall into Iwo categories: I) responding to the incident and command needs of the incident, and 2) of ctively Fulfilling the position responsibilities ofon Incident Commander on an AHIN.-IT. hrl,. -952 Public InIbuuation This course addresses all roles and SIB,$Ob officer responsibilities appropriate to a All I lizards Public Information Officer operating in it local or state -level AHIMT. 'These responsibilities tall into two categories: 1) responding to the incident and command needs of the incident. and 2) effectively flulhlling the position responsibilities ofa Public lulbrmation Officer on all AHIMT or sin -le resource. E.-L. 954 Salcty Officer This course addresses all roles and 518,800 responsibilities appropriate to an All -Hazards Safely O[licci operating in a meal or State -level AHINIT or a single resource. These responsibilities lall into two categories: 1) responding to the incident and command needs of the incident, and 2) effectively I'bIlilling the position responsibilities ofan Safety Officer on an .A I I1MT or as a single resource. 11I.-9561.iaisonoflicer This courseaddrosscsall roles in( lresponaihiIitics� 517,999 appropriate to ;i Liaison Officer operaing oil local or State -Level AlH lazards ICS Incident Management Team. These responxibi lilies fill into two categories: I ) responding to the incident and the conunand needs of the incident, and 2) eflceuvefy fulfilling the position responsibilities ofa liaison Officer on an AHINIT. G'L- 958 Operations Section The goal ofthis professional dcscfopmcnl S18.500 Chief' course is to provide the local and state -level emergency responders with an overview of kcy duties and responsibilities of a Operations � Section Chief Type III in aType III AIIIMT•. E/L-966Dtvision Group b15,501f This course addresses all roles and Suptr nor All Tusk responsibilities appropriate to a DIVS operating is a local or state -level AHIMT or response. Those responsibilities fall into two categories: I I )respon(ling to the incident and commend I needs of the incident, and 2) effectively Fulfilling the position responsibilities of a _ Division or (3r qi Supervisor, $17,999 EIL-962 Planning Section -this course addresses all roles and --_.-- Chief responsibilities appropriate to a Ali Hazards Planning Section Chief operating; in a local or state -level Att-Hazards Incident Management Team. Those responsibilities Fall into two categories: 1) managing the planting cyele and 2) tratckinr; resoufUs arid incident status. E/L-96 }Situation C;nit _ -]`his course addromes all roles and $17,949 Leader responsibilities appropriate to a All -hazards Situation Unit Leader operating in a local or Slatc-level AHIMT. These responsibilities Fall into two categories: Situation Unit Leader duties: t) processing nlllormation and __` _ Ifn0111 n4e and 2) deyclopmg displays. Ei Lr965 Resowccs_lj Ctit Tins course addresses all roles and $17,949 Leader responsibilities appropriate to a All -Hazards Rusouruvs unit Leader_ operating ina -local or state level ARINrl' or as a single resource. EIL-967 Logistics Section This course addresses all roles and $20.853 Chief responsibilities appropriate to a Logistics Section Chief operating on local or State -level All Hazards ICS Incident Management Team Timm rosponsibilities fall into two caategories: Lo-istics Section Chi0f duties 1) responding to the incident; and 2) cf ectively fulfilling the position responsibilities of a Logistics Section Chief on an All -Hazards ICS Incident Management Team. C',+'L-969 Conununication $17,949 This course addresses all roles and Unit Leader responsibilities appropriate to a COML o crating in a local or state -level AHIMT. -970 Supply Unit Leader Provide local and state-levul erncrgency responders with an overview of key duties and responsibilities of Supply Unit Leader Type Ill in a Type III All -Hazards Incident Malagenlent"Team (A[IMIT). H/ 971 facilities Unit This course addresses s all roles and Leader responsibilities appropriatc to a Facilities emit Leader operating on a local or state -level AF1IMT. — — Finance Section This course addresses an roles and Chief responsibilities appropriatc to a Finance Section Chiel'operating in a local or stale -level AHIMT. These responsibilities fall into two categories: Finance Section Cllicl'dutics 0managing the Finan(e/Administration Section personnol and 2) managing the finances and administrative LIL-975 Finance/Adnnn This course addresses all Poles atld Unit Leader rospoilsiblbties appropriate to operating in one of the FIrlancelAdministration Unit Leader positions on it local or state -level AHIMT or single resource assignment. These responsibilities fall into two categories: t) responding to [lie incident and the command needs ofthe incident, and 2) effectively 11111lilling the position responsibilities of a Finance Administration Unit I,eader on an --_AI-11h'IT or as -a sin^g][c resource, Despite tlu inlpatEtulue of EOC' coordination Emergency Operations Center (EOC) Action and planning, there are fever resources available Planning (EOCAP) - CA- for EOC personnel to improve their skills and 007 COMM knowledge in this area. This interactive ono -day course. provides instruction oil the EOC coordination process with a focus on the role of the F,()C Management Section and the inputs, processes, and outputs of developing the F?OC coordination plan, SmdQats receive instruction on the best practim and tools that feed the EOC coordination process and tine aililydod the opportunity to apply their training during hailds�on activities. 7,949 Etncrgcncy Operations This course focuses oil FOC Managenlent atldl Center(FOC) Management Operations. Content includes Multiagency and Operations G775 Coordination, EOC design, how to staff, activate and deactivate an EOC, Performance Objectives - Muftiagency Coordination Systems (MACS) and where hOCs tit into MACS per i RAS - raetors to consider when staffing the EOC and ways to organize staff - NINIS requirements for interoperable attd redundant communications EOC information needs and equipment to support those needs - Analyze current EOC functions and alternate EOCs - PI'occsses to activate and deactivate live EOC - ICSIEOC interface _ _ '.. -_Training and exercising your EOC' personnel Emergency Operations The Situational Awareness and Common ('enter (EOC) Situational Operational Picture for Entergmey Operations Awareness and Common Centers Course is a 16-hour, classroom Operation Picture delivered, training course drat is U& Department of t-lotnolottd SecUrity certified and a CST'i Type fit F.00 Position Credentialing requirement, The course is designed to build tho situational awareness and common operating picture (SAiCOP) skills, knowledge, and capabilities o rospoulders supporting alt-hazards response operations in the field and emergency Operations centers, In addition to SA;ICOP 111hlrUotion, die coUrtie also provides practical strat:gies and tools fo synchronize workflow ekiring the EOC action planning process (Planning P). `fhe training is a combination of tect ro, hands-on activities, and culminates with an innovative, emergency management hoard game that affords shidents the opport pity to apply the SA/COP principles and tools in a envy Planning This cot se ttrnvidcs the students wish training in the (6235) fundamentals of the. cnlcreency planning process, including the rationale hehhul planning, li will develop the students' capacity For erre-ouve participation in the all-)raaai•d einergcncy opernticrns Planning process to save lives and protect property threatened by disaster. SI EOC Action Planning ((-iCi2()) Similar to the EOC Action Planning course but tnnncated, this courses focuses on the fundamentals of the EOC Action Planning r Ul,'t'.ss. EOC Management and This course focuses on EOC Management and Operations (G775) Operations. Content includes Multiagcncy Coordination, EOC design. haw to staff, activate and deactivate an EOC:. Performance Clbjeetives - Multiagcncy Coordination Systems (NIAC'S) and where EOCs fit into MACS per NINIS - Factors to consider when staffing the EOC an[I Slays to organize stall' - NIMS regUlFtilnentS For interoperable and redundant communications - EOC in[ornlallcin needs and equipment to support dui. needs - AnatyZe current EOC furict'Ions and altematc EOCs - Processes to activate and deactivate tile EOC -1CYEOC interface - Trainink anti exercising your EOC personnel Essential EOC This training module focuses on key Emergency SacttotvPlltruihlg "fraillinp .. Operations Center (EOC) positions witliirl the Finance and Administration Finance & Admin Section batted on the state (G 1 t O-F) OES EOC Section/Position credentialing Essential EOC - This training /nodule t'ocuses on key Emergency -Operadolls Suctionr"Planning Training C.'enter (F,OC) po5ltlolls Within the Logistics (G 1 10-L) Logistics Section based on the state OES EOC Section/Position credentialing document. Essential EOC This training; module focuses oil key € incrgency Sections-Ttanning Training - Operations Center (EOC) positions within the Management (G t IO-M) Management Section based o❑ the state OES Eft' `s'ection+'Position credentialing document. Essential tiOC `Chis training module focuses oil key Emergency Section+Plei rming Training - Operations Center (EOC) positions within the Operations (CII 10-0) Operations Section based on the state OES EOC Section/Position uredentialink�* tl[7S,Ulllent, Essential EOC This training module tocus s on koy Emergency Section:"Planning Training - Operations Center (EOC) positions within the Planning and lntetligence Piannitigand Intel Section based on the state (GI IO-P) OES EOC Section/Position credentialing document. $20,853 $7 $7,023 ,Q23 $7,023 Essential rt9C Action This course is intendcct to state ce;rtil'y 59,R73 planning TTT (G626) instructors so they can offer the CSTIiCal OHS approved Essentials of Action Planning Course, Once the instructor ,s certified as an Outreach Instructor, heishe will he able to request state certification from CSTIICaI OES for the; snntcnls attending the "Outreach" Essentials of Action Planning Course, Ci-191 ffCS,•'EOCInterface The goal of this professional development $9,195 Workshop course, PUG 0 19 1. Emergency Operations Centerllncident Command System Interface, is to enable the: s(Udeats to develop an effective interface between the Incident Commandluni ied Ctlmmand and the Emergency Operations Center by applying National Incident Management System principles, Selection Criteria: The intended audience(s) are federal, State, tribal, territorial. local level, private industry, volunteer and ❑ongovernmeiirid emergency management personnel who are active in a conmarmity''s tt S and EOC activities. This course works best when delivered to combined audience of ICS and EOC persomtcl, The material were developed with the assumption that audience Ine nbers tray have little or no actual experience as a member of an Incident Command Post staff of an E.00 Staff, G290+'O29 f Basic Public The course will enable the participants to 313,5ut) InForniation 011icer and develop an effective interface between (lie Joint Information Incident Command and the Emergency Systo111J0itnt lntornnatioll Operations Center (EOC) by applying Incident _ __Center _ Command (ICS) principles. _ I-166. Introduction to the The 8-hour course provides training and $5,604 tncident Command System resources, for first responder persomict who 1' gUiCC all introduction to the Incident Command System. The course i5 designed to enable person11el to operatc efiieicntly during an incident or event within the [CS, SH. S, oi- t N IMS, _ — 1-200: Basic Incident This 9-hour course provides training and S5,802 i Command System ]'or Initial resources for first responder personnel who I Response require a basic understanding of (he Incident Command System (ICS). The course is designed to expand upon information covcrc(l in the ICS 100 (Introductory) C.`onrse and enable persolnel to Operate Inorc clliciently during on incident nr event within the ICS, St;NIS, anti. NIMS. I-300. Inw methate fC5 ILlr This 20-hOUr COLIN ^. provides training all([ $9,942 Expanding Incidents reaoarCeS for personnel who require advanced application of the Incident Command System (ICS). This course eXINUICIS upnn inrorni Lion covered in ICS 100 and 200 courses. The course also allows those identified personnel, including public health personnel, lO comply with ICS level 300 trafnin . €-400: Advanced JCS for This 1 6-hour course provides training; and 8,502 Command an([ General Staff NSOLIMUs for punsonnul who require advanced understanding and application of the Incident C 01111rland SyActll (ICS), This course expands upon inrorniation covered in the ICS 300 Course. 1-700: National Incident This course provides an overview of the �i2,SlN1 Management System, An National Incident Management System (NIMS). €nlroduclion Tlne National Incident Management System I defines the comprchensivc approach guiding the G whole community - aII levels ol,govelllment, nongovernmental organizations (NCICi), and the private sector - to work together seamlessly to prevent, protect against, mitigate, respond to, - -- --- - -- and recover rro T tine effects of incidotlts, The - - eOluse provide8 learners with it basic I understanding of NINIS concepts, I principles, llltl LU1l1OnLn€S _..-.. [ 800: National Response The goal of'the IS-0800A, National Response $2,at1U Framework, An Fi°amework, An Introduction, is to provide I hltl'oduotlon guldallee for the whole community. Within this broad audience„ the National Response Framework focuses especially oil those who are involved in delivering and applying the ___ response core capabilities 0-305 -'type 3 Incident This course Srervcs as a basic lntr'-dklctloll to thG Manageincot Training ing aetivitics and processes of aType 3 All-Flazartls Incident Management '['earn (At IIMT), enabling them to be better pl'epaled to support large scale or complex operations in their communities. '['his course meets the floods of the National Incident IVlatlapcltlent Systelli (NIMS) and the National Response Framework (NRF) while focusing on the importance of developing and Operating as a functional USFA T331e 3 AHIM'T anti will assist individual responders to Im-form as viable team members. (national Awareness (SA) The Situational Awareness and Common and Common Operating Operational Picture fur Emergency Operations Picture (COP) Course Centels COnrse is it t6-hour, classroom delivered, training course that is U.S. Department of Homeland Security certified and a CS"t I T)rpe Ill ED(' Position CI'edentiahng requirement, The course is designed to build the situational awareness and common operating picture (SA'C'f)P) skills, knowle(Ige, and capabilities o('responders supporting all -hazards response operations in the field and emergency operations centers. In addition to SA/COP instruction, the course adsll provides practical strategies and tools to synchronize workttow during. the EEC lotion planning process (Planning P)-The training is a combination of - flecture, hands-on activities, and Culminates with till innovative, emergency Inanav ment board game that affords students the opportunity to apply the SA/COP principles anti tools in it 533,433 I2pol) FAFROSES k) UiscUSsion-Based Exercises - focus on strategic, policy -oriented issues; facilitator's aruVor presenters usually lead the discussion, peeping participants oat track towards meeting exercise objectives. (*Nate: Estimated costs are cwtinple costs only and dlipict a range that cut exercise ma y fall within, .Actual costs year vary and is dependent an the Size, scope, rand Exercise R:ta ,e i- (Nw (N:stiman;d) Scmintu' Seminars generally orient participants to, or $20,001) provide an overview of, authorities, strategies, plans, policies, procedures, protocols, resources, concepts, and ideas. Seminars can he valuable for entities that are developing or making major changes to existing_plzins or prctccdures. Workshop Although similar to seminars, workshops differ $20,400 in two important aspects: 1, participant interaction is increased, lind'2. locus is placed on achieving or building it product. To be effective, workshops should have clearly defined objectives, products, or goals, and should focus cn a soeailic issue. Tabletop Tabletop Exercises (TTX) are intended to `15,000 generate discussion of various issues regarding a hypotbelical simulated emergency. They can be used to enhance general awareness, validate Platis flrtcd.procedures,whe;:arseconcepts, anchor assess the types of systems needed to guide tic prevention of. protection from, rnitigauou of, response to, and recovery from a defined incident. The effectiveness ora TTX is derived from [lie energetic involvement of participants zinc] their assessment of recommended revisions to current policies, procedures, and plans; thereiin'e facilitation is critical to weeping t?artichmits focused on exercise obiecrivire. B) Operation -Based Exercises - used to validate plans, policies, agreements, and procedures; clarify roles and responsibilities; and identify resource gaps. Exercises ate characterized by actual reaction to an exercise scenario, such as initiating communications or mobilizing personnel and resources. ('Write: E-stimatect CoSCP are example vows nNfv and dellia a i-Clage !hurt cart exereiee not iv ifl "Ithin..ielua( ecr_s1s eau verb and is dependent oil the size, scone, curd iroriuhles involved with a par€ictdar exercise) Exercise Type I Description Grill A drill is a coordinated, supervised activity usually employed to validate a specilic function or capability in a single agency or organization. Drills are commonly used to provide training on new equipment, validate procedures. or practice and maintain current skills. For every drill, clearly defined plans, procedures, and protocols need to be in place. Personnet aced to be t'amiliar with those plans and trained in the Il'OCesses and procedures to be drilled. Functional h'unctional Exercises (FE) are designed to validate and ovaluate capabilities, multiple functions arid,'()]'sub-functions. or interdependent groups orfimctions. FES are typically ft/cusecl tan exercising plans, policies, procedures, and staff members involved in managenicnt, direction, Command, and control runctions. An F-H is conducted in a realistic, - ---- ---- real -unit' Onvirolullontt-ltowcvert M0vcIIIcnL Off - _ _ _personnel and ecuipment is usually sirtnulntecl, Full-Scale Full -Scale Exercises (i'SE) are typfcallythc most complex and resource: -intrusive type of exercise. They involve multiple agencies, organizations, and Jurisdictions and validate litany facets of preparedness. FSEs often include many players operating under cooperative systortls such as the Incident Command System (ICS) or unified Command, In an FSE, events are projected through an exercise scenario with event Updates that drive activityat the operational level. FSEs are usually conducted in a real -tine, stressful rnvironnim that is intended to mirror a teal incident. Throughout the duration of €lie exel'rise, many activities occur simultaneously. Runt. ol'Cusi (Estimated) Exercise Type Description Rang of Cost (Estimated) ASAUASI Cyber Security Cybersecurity Awareness/Incident Response $169,891.80 Training & Exercise Services Training Course Provide staff to design, develop, and deliver up to eight (8) multidisciplinary cybersecurity training courses addressing the unique needs of IT professionals and law enforcement. This four (4) hour course will be customized to include a historical understanding of cybersecurity as a discipline, with an analysis of previous cybersecurity events, their sequence, and impacts, from past to present day. From this context, the course will then provide instruction on access restriction, multi -layer defense, and enforcing due care and due diligence while adhering to laws and regulations. Additionally, the course will include instruction on cyber post -attack activities and procedures, covering topics such as indicators of compromise and restoring the network's Active Directory after compromise; and protocols for prior preparation, proper identification, safeguarding and collecting best evidence and reporting. Moreover, our training model is flexible: should the urban area desire an eight (8) hour course, with more depth to the training, our team can accommodate this. Cybersecurity Awareness/Incident Response Training Exercise Homeland Security Exercise and -- — - Evaluation Program (HSEEP) conforming and will include the use of a series of planning meetings, to customize training materials; assemble the necessary exercise documents and material templates; prepare event administrative materials; and coordinate participation. The SenseMakers Team will be organized around specific planning tasks to design and provide the Cybersecurity Awareness/Incident Response Training Exercise. SenseMakers planners and subject matter experts will participate in the planning and conduct o the tabletop exercises. Jim Bailey will lead the tabletop planning with support from Lauren Copeland, Patty Magallanes, and Rob Bagnall, our team's Cybersecurity SME and instructor. SI All Hazard Simulate a three-day OCAHIMT response to an all Management Team hazard event located within the county of Orange. Services Exercise will consist of 2.5 - 3 days. Day one to consist of table top exercise (TTX) with Emergency Communications Center (ECC), Department Operations Center (DOC), and Command and General Staff Positions (C&G Staff) from Incident Management Team (IMT). Day two and part of three will consist of the exercise of the IMT including; mobilization, ICP setup, operations, exercise all meetings and functions within the Planning and conclude with an Operational Briefing. During the exercise event, one team will be participating in the exercise and a second team serving as evaluators. The exercise shall include a component related to terrorism; the cause of the exercise incident or a simulated secondary event will need to fit this he exercise team should consist of no less than five zbj ect matter experts who will serve as (ereise proctors/coaches in addition to leading the ialuation team. The exercise should be conducted in manner that adheres to all applicable state and ;deral guidelines, including exercise design and :velopment guidelines outlined in the Homeland 'curity Exercise & Evaluation program (HSEEP). his includes an After -Action Report, which will )ntain specific corrective actions and a training